Domain Controller Granular Event Log Delegation

Posted on Posted in Active Directory, Microsoft, Powershell

So you’ve combed through 7 year old TechNet forum posts, cursed the limitations of Event Log Readers group when trying to use Get-WinEvent, and then tried to decipher SDDL to no avail.  A treatment for all those woes:

The basic gist here is that the CustomSD registry value will contain your new permissions and […]

Get AD Group Member Details from Trusted Domains

Posted on Posted in Active Directory, Powershell

The vast majority of active directory powershell cmdlets don’t need any enhancement but there is one in particular that I felt could use an alteration:  Get-ADGroupMember.  When using this command it will return [Microsoft.ActiveDirectory.Management.ADObject] types which can be thrown to a switch statement depending on objectclass and you will get the object’s home AD info.  However, when […]

Add Parent OU in DN and CN Path Format Using Regex Match

Posted on Posted in Active Directory, Powershell

Yet another solution for grabbing Parent OU paths